Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa
File:                     3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (raw, json)
Hash identifier:          9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=
Subject key identifier:   A2:34:DE:B0:3A:7D:09:8A:66:1B:BB:E6:63:44:51:CE:94:80:79:F8
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       1BAACE4C6DEF2FA296F935F3A31064E96E549D86
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa
Signing time:             Fri 16 May 2025 11:00:00 +0000
ROA not before:           Fri 16 May 2025 10:55:00 +0000
ROA not after:            Fri 15 May 2026 11:00:00 +0000
asID:                     149953
IP address blocks:        103.118.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 19:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:aa:ce:4c:6d:ef:2f:a2:96:f9:35:f3:a3:10:64:e9:6e:54:9d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: May 16 10:55:00 2025 GMT
            Not After : May 15 11:00:00 2026 GMT
        Subject: CN=A234DEB03A7D098A661BBBE6634451CE948079F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f4:68:61:7b:61:43:25:8a:3c:cf:2c:04:ce:
                    c8:48:c5:34:e8:63:c2:b0:3b:bb:a8:50:ca:f7:d2:
                    e2:7d:da:94:37:2b:2a:df:65:69:68:9f:6f:fa:ce:
                    8d:a6:80:14:f0:58:68:10:03:af:a0:14:c9:c5:d7:
                    25:31:67:00:01:e8:df:3c:fb:92:6d:8d:ff:27:c3:
                    e7:22:11:77:f5:a0:a0:89:62:0a:91:f5:9d:c9:b6:
                    cf:45:a1:db:3e:72:ec:0e:c2:48:32:a4:d9:fe:18:
                    91:ef:89:5f:81:69:ee:7f:5b:dc:4d:43:0e:b2:7f:
                    09:68:7e:72:3f:f9:73:00:5e:9f:a4:a4:3b:06:30:
                    68:0e:9e:44:a7:27:89:4b:75:e3:b4:16:e1:68:d1:
                    3c:cc:58:9c:a3:23:63:17:d7:41:83:a1:c1:ce:17:
                    f5:64:f6:88:27:ef:04:46:b7:af:0a:42:48:a4:80:
                    91:74:d5:d0:56:f8:08:7f:88:df:b9:50:e6:62:44:
                    b4:3c:48:49:10:40:cd:88:de:e6:c7:81:35:44:01:
                    bd:d9:4f:6a:03:e1:3f:da:60:04:2c:84:a8:54:e4:
                    68:6d:19:1c:b2:e8:41:95:e3:f1:5f:f7:33:a0:9a:
                    38:89:89:76:40:94:72:c5:1f:d2:35:87:e0:c2:64:
                    e2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:34:DE:B0:3A:7D:09:8A:66:1B:BB:E6:63:44:51:CE:94:80:79:F8
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:90:e1:04:d6:f5:2e:50:1f:8c:b4:d0:c3:45:86:8a:01:61:
         85:f0:1f:18:24:fe:48:65:7f:33:75:76:08:c1:51:0c:d9:0d:
         73:3a:47:a4:2a:fd:f7:9a:2c:8c:19:2d:94:71:c2:b8:c4:e7:
         84:c6:32:6b:5b:fa:26:ea:22:26:dd:cf:8a:0d:24:5e:60:ba:
         5b:47:6c:a9:0f:3a:e6:0e:2a:d1:5d:7e:1d:a4:bd:5c:25:9f:
         29:b7:12:a4:f4:16:60:10:e1:5d:e4:7e:fa:5e:85:ee:b3:43:
         f4:e2:bc:52:a0:37:e2:03:fe:f6:3e:47:4c:b1:5f:4b:c1:35:
         09:f2:29:ef:8f:d7:24:c0:d6:b1:f3:e5:c6:09:66:d2:e1:89:
         85:98:1c:d6:0d:44:21:ad:a5:10:34:80:4e:cd:af:a9:6a:ed:
         22:f0:c6:47:ff:52:57:4f:a3:8b:28:d2:7a:72:e1:f4:88:c5:
         7a:fe:a1:d5:d6:49:06:55:22:28:92:ea:00:9c:7b:6f:e2:4f:
         b7:5b:eb:28:83:a8:13:f7:f2:c2:e2:04:83:f1:04:9c:b1:96:
         3b:52:d2:07:f8:71:26:1b:9e:fa:b7:93:01:e6:8c:61:56:30:
         08:a8:8a:f8:8e:ad:8c:89:14:be:14:5d:66:78:a3:43:03:94:
         41:bd:86:65
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUG6rOTG3vL6KW+TXzoxBk6W5UnYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC
MDhFRkJGMzAeFw0yNTA1MTYxMDU1MDBaFw0yNjA1MTUxMTAwMDBaMDMxMTAvBgNV
BAMTKEEyMzRERUIwM0E3RDA5OEE2NjFCQkJFNjYzNDQ1MUNFOTQ4MDc5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ9Ghhe2FDJYo8zywEzshIxTTo
Y8KwO7uoUMr30uJ92pQ3KyrfZWlon2/6zo2mgBTwWGgQA6+gFMnF1yUxZwAB6N88
+5Jtjf8nw+ciEXf1oKCJYgqR9Z3Jts9Fods+cuwOwkgypNn+GJHviV+Bae5/W9xN
Qw6yfwlofnI/+XMAXp+kpDsGMGgOnkSnJ4lLdeO0FuFo0TzMWJyjI2MX10GDocHO
F/Vk9ogn7wRGt68KQkikgJF01dBW+Ah/iN+5UOZiRLQ8SEkQQM2I3ubHgTVEAb3Z
T2oD4T/aYAQshKhU5GhtGRyy6EGV4/Ff9zOgmjiJiXZAlHLFH9I1h+DCZOKxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUojTesDp9CYpmG7vmY0RRzpSAefgwHwYDVR0j
BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4
OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF
RkJGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05
ZGFhLWQyMjJiN2E4OTA3Mi8wLzMxMzAzMzJlMzEzMTM4MmUzMTM3MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM1MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABndq8wDQYJ
KoZIhvcNAQELBQADggEBADyQ4QTW9S5QH4y00MNFhooBYYXwHxgk/khlfzN1dgjB
UQzZDXM6R6Qq/feaLIwZLZRxwrjE54TGMmtb+ibqIibdz4oNJF5gultHbKkPOuYO
KtFdfh2kvVwlnym3EqT0FmAQ4V3kfvpehe6zQ/TivFKgN+ID/vY+R0yxX0vBNQny
Ke+P1yTA1rHz5cYJZtLhiYWYHNYNRCGtpRA0gE7Nr6lq7SLwxkf/UldPo4so0npy
4fSIxXr+odXWSQZVIiiS6gCce2/iT7db6yiDqBP38sLiBIPxBJyxljtS0gf4cSYb
nvq3kwHmjGFWMAioiviOrYyJFL4UXWZ4o0MDlEG9hmU=
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:28 2025 by rpki-client